hlxsites / hlxsites/prisma-cloud-docs

Invalid fix for CKV_GCP_110

Open
#1,109 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
21
Forks
92
PR merge metrics
No merged PRs in 30d

Description

The [documentation](https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/logging-policies-1/bc-google-cloud-110) says that the fix for CKV_GCP_110 is :
```tf
settings {
database_flags {
name = "pgaudit.log"
value = "'all'"
}
}
```
If we look at the [code](https://github.com/bridgecrewio/checkov/blob/main/checkov/terraform/checks/resource/gcp/GoogleCloudPostgreSqlEnablePgaudit.py#L4-L5) we see that the expected flag is `cloudsql.enable_pgaudit` and value is `on`.

The documented fix should be :
```tf
settings {
database_flags {
name = "cloudsql.enable_pgaudit"
value = "on"
}
}
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.